Description

Magento 2.3 reached its end-of-life on September 8, 2022. If you are running Magento 2.3 or earlier versions, it's strongly recommend to migrate to the latest Magento version

Remediation

It's recommended to migrate to the latest Magento version.

References

Released versions

Related Vulnerabilities

WordPress Plugin List Pages Shortcode Cross-Site Scripting (1.7.4)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (2.0.14)

Drupal Improper Input Validation Vulnerability (CVE-2007-6299)

Oracle Database Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-0275)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44310)

Severity

Info

Classification

CWE-1104 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update